ADFS Warning Event ID 143

  • 473 Views
  • Last Post 11 August 2016
nidhin_ck posted this 25 July 2016

Hi Experts,
In our ADFS 2.0 environment all the servers are continuously generating Event ID 143. We are not facing any issues with the trusts that we configured on the ADFS server. Do you have any idea where to look for this issue.
    

Regards,
Nidhin CK

Order By: Standard | Newest | Votes
Anthony.Vandenbossche posted this 25 July 2016

Hello,

 

This is due to a probe you have setup on your Load Balancing hardware. The probe tries to get the XML file and ADFS does not like that. Remove the probe and events will clear

up. Alternatively, use the “new” HTTP probe for ADFS to monitor endpoints:

 

https://blogs.technet.microsoft.com/applicationproxyblog/2014/10/17/hardware-load-balancer-health-checks-and-web-application-proxy-ad-fs-2012-r2/

 



Regards,

 

Anthony Van den bossche


System Engineer


Anthony.Vandenbossche@xxxxxxxxxxxxxxxx



Direct

+32 (0)2 801 54 59


Description: Description: C:\Users\BJTAF40\AppData\Roaming\Microsoft\Signatures\realdolmen_logo.gif



This e-mail message and any attachment are intended for the sole use of the recipient(s) named above and may contain information which

is confidential and/or protected by intellectual property rights. Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s)

is prohibited. If you have received this e-mail in error, please notify the sender either by telephone (+32 2 801 55 55) or by e-mail and delete the material from any computer. Please note that neither RealDolmen nor the sender accept any responsibility for

viruses and it is your responsibility to scan or otherwise check this email and any attachments. RealDolmen is nor responsible for the correct and complete transfer of the contents of the sent e-mail, neither for the receipt on due time.







 

show

nidhin_ck posted this 28 July 2016

Thanks a lot Anthony! I will work with F5 team on this and update you
Regards,
Nidhin CK

show

matheesha posted this 11 August 2016

screenshot is from AD FS 2.x. The /adfs/probe isn't available for 2.x AFAIK.
IIRC SCOM monitoring used to have a script that would cause this. Worth checking if that is in use here.


show

Anthony.Vandenbossche posted this 11 August 2016

This is indeed an ADFS 3.0 feature, my bad. Since ADFS 2.0 is IIS based, you could also try to create a simple html page to monitor. Alternatively you could also monitor on

the /adfs/ls/idpinitiatedsignon.aspx page. Consider using HEAD instead of GET.

 

Mvg,

 

Anthony Van den bossche


System Engineer


Anthony.Vandenbossche@xxxxxxxxxxxxxxxx



Direct

+32 (0)2 801 54 59


Description: Description: C:\Users\BJTAF40\AppData\Roaming\Microsoft\Signatures\realdolmen_logo.gif



This e-mail message and any attachment are intended for the sole use of the recipient(s) named above and may contain information which

is confidential and/or protected by intellectual property rights. Any use of the information contained herein (including, but not limited to, total or partial reproduction, communication or distribution in any form) by other persons than the designated recipient(s)

is prohibited. If you have received this e-mail in error, please notify the sender either by telephone (+32 2 801 55 55) or by e-mail and delete the material from any computer. Please note that neither RealDolmen nor the sender accept any responsibility for

viruses and it is your responsibility to scan or otherwise check this email and any attachments. RealDolmen is nor responsible for the correct and complete transfer of the contents of the sent e-mail, neither for the receipt on due time.





 

show

Close